In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154177719References: Upstream kernel
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel | May 13, 2022 | Oct 25, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Oct 25, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Apr 20, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-headers | Mar 29, 2022 | Oct 25, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 3, 2022 | Oct 25, 2021 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Feb 13, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Oct 25, 2021 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules | Mar 5, 2024 | Oct 25, 2021 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-vanilla-baseUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade dtb-apmUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-zfcpdump-manUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade dtb-xilinxUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-preemptUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade gfs2-kmp-preemptUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-debugUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade dlm-kmp-preemptUpgrade kernel-livepatch-5_3_18-59_37-defaultUpgrade dtb-lgUpgrade dtb-marvell | Nov 25, 2021 | Oct 25, 2021 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-gkeopUpgrade linux-dell300xUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-azure-fdeUpgrade linux-gkeop-5.4Upgrade linux-hwe-5.8Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-oem-5.10Upgrade linux-raspi2Upgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-snapdragonUpgrade linux-aws-hweUpgrade linux-gke-5.4Upgrade linux-gkeUpgrade linux-awsUpgrade linux-fipsUpgrade linux | Nov 19, 2024 | Oct 25, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub